Executable Analysis
Showing 26 of 26 projects
A cross-platform file type identification tool for malware analysts and reverse engineers, using signature-based and heuristic analysis.
A retargetable machine-code decompiler based on LLVM, supporting multiple architectures and file formats.
A retargetable machine-code decompiler based on LLVM, supporting multiple architectures and file formats.
An open-source tool that detects capabilities in executable files like malware, identifying behaviors such as backdoor installation or network communication.
An open-source tool that detects capabilities in executable files like malware, identifying behaviors such as backdoor installation or network communication.
A Python script to extract and fix PyInstaller executable contents for decompilation.
GUI and console sources for Detect It Easy (DiE), a program for determining file types and packers.
A general-purpose decompiler for machine code binaries that supports multiple processor architectures and executable formats.
A binary file analysis tool that colorizes and displays internal structures of ELF, Mach-O, PE, and archive formats.
A static binary analysis framework for automated reverse engineering and security analysis of compiled executables.
Free Windows executable and binary data detector that identifies packers, compilers, protectors, and file formats.
A freeware reversing tool for PE files, designed for fast and flexible malware analysis.
A portable utility that identifies linkers, compilers, and packers used to create executable files across Windows, Linux, and macOS.
An abstract interpretation-based static analysis platform for disassembling and analyzing binary executables to recover control flow graphs.
Python implementation of PEiD for detecting packers in Windows PE files using signature databases.
A tool to find code caves (empty space) in PE files (exe, dll) for x86/x64 Windows, useful for shellcode placement.
A cross-platform Python tool for detecting packers, cryptors, and compilers in PE files, serving as an alternative to PEiD.
A curated dataset of packed and unpacked PE executables for training machine learning models to detect packing.
Detects packers in Windows PE files using multiple heuristics and PEiD's signature database.
A portable PEiD implementation using YARA rules for malware analysis without requiring YARA installation.
Analyzes Delphi executable map files to display unit and symbol sizes for optimization insights.
Scripts to create malware analysis datasets in the same format as the FFRI Dataset, extracting features from executable files.
A multiplatform packer identification tool and library using PEiD-compatible database syntax.
A Python implementation of PEiD for detecting packers, compilers, and anti-debugging techniques in Windows PE files using YARA rules.
Detects packers in executable files using an entropy-based heuristic from academic research.
Extracts 119 features from PE files for machine learning-based packer detection and malware analysis.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.